This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft File: ltzrqozTLcS_HWbQhzobbz1zSY8.mft (raw, json) Hash identifier: FugzaLJpDeStxi5FSghpFCJ+o95vwAhetLT6TUIRpaI= Subject key identifier: 12:1F:14:1F:96:25:27:D6:3C:2D:19:B9:CA:32:45:16:51:D3:FF:96 Authority key identifier: 96:DC:EB:AA:8C:D3:2D:C4:BF:1D:66:D0:87:3A:1B:6F:3D:73:49:8F Certificate issuer: /CN=96dcebaa8cd32dc4bf1d66d0873a1b6f3d73498f Certificate serial: 019AF49C071633EEFD2FB8A9BAF8DD74F5E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 17:00:57 +0000 Manifest this update: Sat 06 Dec 2025 17:00:57 +0000 Manifest next update: Sun 07 Dec 2025 17:00:57 +0000 Files and hashes: 1: ltzrqozTLcS_HWbQhzobbz1zSY8.crl (hash: /eQVJ8wQssDUalRwupZgevjRpXbl7EYYMlEPL7GpLzI=) 2: wAvxAueoqpHLtk8XQwnNyU9MpT8.roa (hash: BRt8y2qLbXewc3lf068PubvnKUoQIDgwBq9aCv3+KLU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:07:16:33:ee:fd:2f:b8:a9:ba:f8:dd:74:f5:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96dcebaa8cd32dc4bf1d66d0873a1b6f3d73498f Validity Not Before: Dec 6 17:00:57 2025 GMT Not After : Dec 7 17:00:57 2025 GMT Subject: CN=121f141f962527d63c2d19b9ca32451651d3ff96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ef:08:0b:1e:b5:ca:79:6b:20:c4:9b:66:19: cf:cb:06:9c:bf:03:65:de:bb:91:0b:aa:58:54:fa: a8:3d:17:6d:c3:05:93:e1:44:65:ea:38:90:58:c1: 23:0f:85:e8:02:eb:56:25:4d:a7:95:b3:22:2b:c5: d5:ae:10:fe:6d:50:db:f7:f1:60:08:5e:9d:88:0c: 1b:1f:c2:73:b7:37:31:3a:af:95:f5:ba:58:45:2a: c4:b3:64:76:0e:94:ce:96:e9:d2:7d:a8:9b:bb:82: 13:cd:fe:1d:24:69:44:12:f6:17:5a:05:76:73:aa: 7a:f9:73:a3:72:31:7c:de:25:0e:bd:44:37:0c:ba: 88:e5:75:63:70:b6:26:58:62:cd:9e:db:ae:59:f3: 6e:c7:4c:bb:60:25:09:da:e9:9b:bf:7c:ae:b9:ab: d6:29:41:cd:4c:f7:ed:bd:dc:d7:f5:88:ef:dc:57: 80:97:4a:1b:57:3b:9e:7d:84:b7:68:a7:27:89:34: 2f:9b:a4:b4:82:97:09:5f:53:73:8a:3f:24:8c:83: 8b:af:3b:b5:a6:d0:e5:6c:aa:cc:1c:1f:76:7d:02: 80:ad:e6:a9:96:28:18:f6:61:d5:04:77:de:14:a3: 6e:04:70:05:3f:67:41:45:a4:0c:94:de:1a:0b:81: 0b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:1F:14:1F:96:25:27:D6:3C:2D:19:B9:CA:32:45:16:51:D3:FF:96 X509v3 Authority Key Identifier: keyid:96:DC:EB:AA:8C:D3:2D:C4:BF:1D:66:D0:87:3A:1B:6F:3D:73:49:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltzrqozTLcS_HWbQhzobbz1zSY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0697c0-98ae-44ab-b4ab-b615c5c60652/1/ltzrqozTLcS_HWbQhzobbz1zSY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:58:37:39:56:03:df:dd:7a:72:a2:a9:89:2d:d7:42:a4:43: 1a:1b:ec:2e:fe:39:65:67:b7:38:3a:52:4e:bc:b4:c2:0a:82: 42:b8:ba:a1:ee:53:e2:26:36:7b:ec:d2:ea:99:c9:aa:6c:4c: 37:c5:76:0b:0c:c0:ed:67:3c:37:5f:4f:77:7b:08:2b:1d:37: c6:fa:ce:7b:e7:b9:2b:7b:3b:a6:95:c7:aa:18:36:06:27:f1: fa:96:1e:ab:55:4b:9d:c6:36:8c:eb:ba:9e:e1:64:69:2d:23: 8f:aa:12:e1:52:92:5b:90:5f:63:22:9b:e1:83:37:ac:08:8e: 71:5c:c4:2d:9e:c5:af:a2:fd:c3:9c:d8:42:ba:4e:57:48:b7: 69:af:67:f7:da:98:f1:ed:d3:28:f5:80:8a:e3:bc:09:10:fe: 28:1c:f8:b6:53:a3:6f:c7:66:53:e3:4c:34:ad:1a:f4:e9:1d: 44:bf:d2:2c:b5:72:a7:35:dd:b6:72:0b:ca:73:e4:a2:b3:a9: 99:41:d4:4d:42:85:ce:ed:1c:c5:58:34:82:02:fc:52:e7:01: 49:31:90:b5:e9:39:21:e3:aa:d6:2e:c9:57:c9:c3:bf:7f:ff: 31:bf:6d:2c:06:1b:dd:1d:ba:4c:3b:b1:84:ef:0b:99:0a:e5: 3f:a3:2c:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nAcWM+79L7ipuvjddPXmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZGNlYmFhOGNkMzJkYzRiZjFkNjZkMDg3M2ExYjZmM2Q3 MzQ5OGYwHhcNMjUxMjA2MTcwMDU3WhcNMjUxMjA3MTcwMDU3WjAzMTEwLwYDVQQD EygxMjFmMTQxZjk2MjUyN2Q2M2MyZDE5YjljYTMyNDUxNjUxZDNmZjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe8ICx61ynlrIMSbZhnPywacvwNl 3ruRC6pYVPqoPRdtwwWT4URl6jiQWMEjD4XoAutWJU2nlbMiK8XVrhD+bVDb9/Fg CF6diAwbH8JztzcxOq+V9bpYRSrEs2R2DpTOlunSfaibu4ITzf4dJGlEEvYXWgV2 c6p6+XOjcjF83iUOvUQ3DLqI5XVjcLYmWGLNntuuWfNux0y7YCUJ2umbv3yuuavW KUHNTPftvdzX9Yjv3FeAl0obVzuefYS3aKcniTQvm6S0gpcJX1Nzij8kjIOLrzu1 ptDlbKrMHB92fQKAreapligY9mHVBHfeFKNuBHAFP2dBRaQMlN4aC4ELvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBIfFB+WJSfWPC0ZucoyRRZR0/+WMB8GA1UdIwQY MBaAFJbc66qM0y3Evx1m0Ic6G289c0mPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHR6cnFvelRMY1NfSFdiUWh6b2JiejF6U1k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8wNjk3YzAtOThhZS00NGFiLWI0YWIt YjYxNWM1YzYwNjUyLzEvbHR6cnFvelRMY1NfSFdiUWh6b2JiejF6U1k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8wNjk3YzAtOThhZS00NGFiLWI0YWItYjYxNWM1YzYwNjUy LzEvbHR6cnFvelRMY1NfSFdiUWh6b2JiejF6U1k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlg3OVYD 3916cqKpiS3XQqRDGhvsLv45ZWe3ODpSTry0wgqCQri6oe5T4iY2e+zS6pnJqmxM N8V2CwzA7Wc8N19Pd3sIKx03xvrOe+e5K3s7ppXHqhg2Bifx+pYeq1VLncY2jOu6 nuFkaS0jj6oS4VKSW5BfYyKb4YM3rAiOcVzELZ7Fr6L9w5zYQrpOV0i3aa9n99qY 8e3TKPWAiuO8CRD+KBz4tlOjb8dmU+NMNK0a9OkdRL/SLLVypzXdtnILynPkorOp mUHUTUKFzu0cxVg0ggL8UucBSTGQtek5IeOq1i7JV8nDv3//Mb9tLAYb3R26TDux hO8LmQrlP6MsvA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:24:35 2025 by rpki-client